This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft File: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft (raw, json) Hash identifier: UTG9LgKz0V24Xzxnsb6+EeGZpTfP3zauigHBK9iGWBE= Subject key identifier: 18:D6:32:54:4B:87:DD:74:21:A4:B4:E1:97:8E:C5:15:99:5B:B1:1D Authority key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 Certificate issuer: /CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Certificate serial: 36445C6D0DB2C68513C51C734BF9335CD572FF91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft Manifest number: 03C6 Signing time: Thu 04 Dec 2025 21:31:15 +0000 Manifest this update: Thu 04 Dec 2025 21:26:15 +0000 Manifest next update: Mon 08 Dec 2025 06:07:15 +0000 Files and hashes: 1: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl (hash: I5FW94TiWstKT+F5m3Gwg6nH8Ak6RMmu2bb/HdnDdCw=) 2: 3130332e3136372e32302e302f32342d3234203d3e20313431393730.roa (hash: GKVVkkXboxeT4WcoJCcUdHA/7DHycn3Kvf/vm4KqRk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 06:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:44:5c:6d:0d:b2:c6:85:13:c5:1c:73:4b:f9:33:5c:d5:72:ff:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Validity Not Before: Dec 4 21:26:15 2025 GMT Not After : Dec 8 06:07:15 2025 GMT Subject: CN=18D632544B87DD7421A4B4E1978EC515995BB11D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1e:ab:52:02:f5:d1:07:48:53:52:cf:65:38: 9a:38:c8:32:0d:2f:ef:d9:df:5c:67:7a:ee:5b:f3: 3a:f5:c7:93:bc:95:3e:00:5d:eb:d2:89:af:ab:3a: df:7e:f3:bd:c2:51:3e:50:a4:99:8b:54:14:df:73: e5:71:c2:45:97:10:3e:90:84:c8:ce:ae:cf:e7:16: 65:19:c5:46:c2:7a:e2:a5:16:d1:d8:71:9a:cc:e1: e2:61:66:ff:ca:ea:75:c9:b8:6b:2c:a4:4a:8a:15: 28:a1:9c:d4:07:83:36:c4:8f:b1:c3:3b:e3:be:98: c3:7a:c8:1a:21:7b:ec:40:fd:2e:5a:da:a5:40:10: d9:bd:76:d8:90:7d:19:f6:c8:9d:59:e2:66:78:0e: 95:43:f5:46:b1:c2:d8:9d:5e:75:1e:e6:51:b6:83: 18:3d:c9:ce:bb:bd:6f:6d:54:79:76:38:28:c9:b9: e7:65:b4:ab:44:17:4d:97:78:84:7b:b4:67:0f:6f: a5:c8:99:e4:71:52:e0:c5:5d:87:3b:f7:61:22:38: 49:f9:2a:d3:ab:25:ea:15:66:c9:94:0f:0d:0a:46: 56:6a:1e:2f:8c:19:dc:ba:1d:40:d6:c9:90:b5:e2: 24:d4:06:3e:07:87:90:5c:8b:46:03:9c:37:3c:2a: a8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D6:32:54:4B:87:DD:74:21:A4:B4:E1:97:8E:C5:15:99:5B:B1:1D X509v3 Authority Key Identifier: keyid:3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3c:fa:b8:a0:35:2a:04:60:e6:3c:d2:8c:6d:e0:85:40:12: d3:c7:f2:1f:a5:c3:76:71:b5:ab:87:1f:aa:63:a9:7c:3b:96: 09:b8:31:49:b6:96:43:00:52:d5:30:80:b5:38:69:be:41:17: a5:ce:99:bd:53:e4:eb:b4:2d:80:30:e0:a4:e7:49:87:8b:3e: c0:6f:a8:44:51:46:d8:df:0f:b5:fc:08:b4:a1:ed:1f:38:5a: 2e:ec:da:2b:6c:a3:1c:93:ff:c3:d8:a7:4a:44:ce:77:82:78: 4e:dc:ad:ad:8a:02:44:7e:85:95:1e:81:03:c7:f7:cf:c6:8f: a7:4d:f5:28:a5:a5:91:b8:a4:14:ce:05:b8:2b:66:c4:96:b9: 05:66:b5:f3:04:46:8c:2c:99:82:23:14:93:84:d9:e3:9a:fc: 9a:cc:58:7f:6f:f6:31:b5:d5:0c:85:d7:dc:d6:f0:5a:f3:9a: ae:2e:e1:b9:fc:cf:de:8a:cd:e3:0c:4b:c1:59:d2:19:7a:22: 82:5b:2c:f0:65:77:ec:ab:ca:ea:20:22:a2:84:0f:2f:54:ef: 3e:2a:99:7a:f6:b1:61:f3:27:64:15:e9:fc:c7:4d:ed:cc:57: 3f:bd:2a:e2:3e:2f:5f:32:0e:a7:77:00:fb:08:dd:ea:96:2e: 4f:ca:de:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkRcbQ2yxoUTxRxzS/kzXNVy/5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNC QzY0MzUyNTAeFw0yNTEyMDQyMTI2MTVaFw0yNTEyMDgwNjA3MTVaMDMxMTAvBgNV BAMTKDE4RDYzMjU0NEI4N0RENzQyMUE0QjRFMTk3OEVDNTE1OTk1QkIxMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HqtSAvXRB0hTUs9lOJo4yDIN L+/Z31xneu5b8zr1x5O8lT4AXevSia+rOt9+873CUT5QpJmLVBTfc+VxwkWXED6Q hMjOrs/nFmUZxUbCeuKlFtHYcZrM4eJhZv/K6nXJuGsspEqKFSihnNQHgzbEj7HD O+O+mMN6yBohe+xA/S5a2qVAENm9dtiQfRn2yJ1Z4mZ4DpVD9UaxwtidXnUe5lG2 gxg9yc67vW9tVHl2OCjJuedltKtEF02XeIR7tGcPb6XImeRxUuDFXYc792EiOEn5 KtOrJeoVZsmUDw0KRlZqHi+MGdy6HUDWyZC14iTUBj4Hh5Bci0YDnDc8KqiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGNYyVEuH3XQhpLThl47FFZlbsR0wHwYDVR0j BBgwFoAUOyYIN48D3K2aZLffaLUvLLxkNSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Zjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMC8zQjI2MDgzNzhG MDNEQ0FEOUE2NEI3REY2OEI1MkYyQ0JDNjQzNTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJGMkNCQzY0 MzUyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY3NmI3NzMtNDA1Zi00NThmLTli ODgtODUyMDk1MTczZjE2LzAvM0IyNjA4Mzc4RjAzRENBRDlBNjRCN0RGNjhCNTJG MkNCQzY0MzUyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABI8+rigNSoEYOY80oxt4IVAEtPH8h+lw3Zx tauHH6pjqXw7lgm4MUm2lkMAUtUwgLU4ab5BF6XOmb1T5Ou0LYAw4KTnSYeLPsBv qERRRtjfD7X8CLSh7R84Wi7s2itsoxyT/8PYp0pEzneCeE7cra2KAkR+hZUegQPH 98/Gj6dN9SilpZG4pBTOBbgrZsSWuQVmtfMERowsmYIjFJOE2eOa/JrMWH9v9jG1 1QyF19zW8Frzmq4u4bn8z96KzeMMS8FZ0hl6IoJbLPBld+yryuogIqKEDy9U7z4q mXr2sWHzJ2QV6fzHTe3MVz+9KuI+L18yDqd3APsI3eqWLk/K3ng= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:21 2025 by rpki-client